Control: AWS > PCI v3.2.1 > IAM > 5 Virtual MFA should be enabled for the root user

This control checks whether users of your AWS account require a multi-factor authentication (MFA) device to sign in with root user credentials. It does not check whether you are using hardware MFA.

PCI requirement(s): 8.3.1

Resource Types

This control targets the following resource types:

AWS > Account

In Your Workspace

Controls by Resource report
Controls by Control Type report

Developers

Control Type URI

tmod:@turbot/aws-pciv3-2-1#/control/types/iamRootUserVirtualMfa

Category URI

tmod:@turbot/turbot#/control/categories/compliancePci

GraphQL

query controlType(id: "tmod:@turbot/aws-pciv3-2-1#/control/types/iamRootUserVirtualMfa") { … }

query controls(filter: "controlTypeId:'tmod:@turbot/aws-pciv3-2-1#/control/types/iamRootUserVirtualMfa'") { … }

CLI

Get Controls

turbot graphql controls --filter "controlTypeId:tmod:@turbot/aws-pciv3-2-1#/control/types/iamRootUserVirtualMfa"